I have just finished rolling out Backup EXEC 11d to 11 of our remote offices. I created a service account in AD and added it to the Domain Admin group. That account is the System account used for the local backup jobs for each remote office. Here's where it gets tricky. Backup Exec is installed on a Domain controller (don't ask me why). Now I need to delegate rights to each of the local support staff to manage Backup EXEC. I really just want to them to be able to run the Backup EXEC Management console from their PC, view the job logs and run restore jobs. They don't need rights to do anything else. Any ideas? Thanks in advance.